alasio 7.0.0 → 9.0.0

package/dist/src/node-agent/names.js

@@ -8,6 +8,35 @@
  */
 /** The port a node agent serves its API on, on its pod's address. */
 export const NODE_AGENT_PORT = 8484;
+/**
+ * The port a node agent serves the snapshots bucket on, to its node's restores, on its
+ * pod's address (../node-agent/store-proxy.ts): no network policy admits it, so the node
+ * alone reaches it, as a node reaches the pods it runs.
+ */
+export const STORE_PROXY_PORT = 8485;
+/**
+ * Where a node agent keeps, on its node's /run, a tmpfs, what outlives it until the node
+ * restarts: the Unix domain socket it serves the snapshots bucket on to its node's restores
+ * too, which a restore's checkpoint gofer dials by its path, whatever pod the agent runs in
+ * (STORE_SOCKET), and those restores' tokens, read back as it starts again
+ * (STORE_TOKENS_FILE), each only root's. Of the pods alasio makes, the agent alone mounts the
+ * node's /run (cli/src/manifests/node-agent.ts), and the sessions' pods are held to their
+ * templates, which mount none of it (cli/src/manifests/admission.ts sandboxPodPolicy). The
+ * host profile's mounts, which the operator gives alasio and the folder's bayma, could reach
+ * it, but both run as the operator's user (1000 unless the profile says), whom the socket's
+ * and the file's mode, 0600 and root's, keep out.
+ */
+export const NODE_AGENT_RUN_DIR = "/run/alasio/node-agent";
+/** The variable that moves NODE_AGENT_RUN_DIR, as a test of the agent's own process does. */
+export const NODE_AGENT_RUN_DIR_VARIABLE = "ALASIO_NODE_AGENT_RUN_DIR";
+/** The socket a node agent serves the snapshots bucket on, on its node, in `runDir` (NODE_AGENT_RUN_DIR). */
+export const storeSocket = (runDir) => `${runDir}/store.sock`;
+/** The file a node agent keeps its restores' tokens in, on its node, in `runDir` (NODE_AGENT_RUN_DIR). */
+export const storeTokensFile = (runDir) => `${runDir}/tokens.json`;
+/** The URL a restore's gofer names the store by through STORE_SOCKET, which it signs: no host's, as the socket alone is dialled. */
+export const STORE_SOCKET_ENDPOINT = "http://alasio-node-agent";
+/** The variable that gives a node agent its pod's address, which it serves the bucket to its node on. */
+export const POD_IP_VARIABLE = "POD_IP";
 /**
  * Where a node keeps the gVisor releases alasio keeps, each in a directory of its own
  * named after it, as its release archive has them: runsc, its shim, and gvisor-bin/, the
@@ -16,6 +45,50 @@ export const NODE_AGENT_PORT = 8484;
 export const GVISOR_RELEASES = "/usr/local/lib/alasio/gvisor";
 /** The directory of gVisor's `release` on a node. */
 export const gvisorDirectory = (release) => `${GVISOR_RELEASES}/${release}`;
+/**
+ * Whether gVisor's `release` restores a sandbox straight from the bucket, its images read
+ * through the checkpoint gofer as the restore goes: one of the fork's at or past `since`,
+ * the first release that does, as cluster/node/pins.json says it (restoresFromBucketSince)
+ * and the installation gives the node agent it (RESTORES_FROM_BUCKET_SINCE_VARIABLE), by
+ * its base's date and patch, then its own number. One before it, as the fork's
+ * 20260921.0-eaucoin.6, which ends the sandbox as it tries (`urpc method
+ * "containerManager.Restore" failed: EOF`), is fetched into the node's cache first and
+ * restored from there; so is one that names no release of the fork's, and every release
+ * where `since` names none.
+ */
+export function restoresFromBucket(release, since) {
+    return releaseAtOrPast(release, since);
+}
+/**
+ * Whether gVisor's `release` is the fork's `since` or one past it, by its base's date and
+ * patch, then its own number; never where either names no release of the fork's.
+ */
+function releaseAtOrPast(release, since) {
+    const parts = (named) => {
+        const matched = /^(\d{8})\.(\d+)-eaucoin\.(\d+)$/u.exec(named);
+        return matched ? matched.slice(1).map(Number) : null;
+    };
+    const [of, first] = [parts(release), parts(since)];
+    if (of === null || first === null)
+        return false;
+    const differs = of.findIndex((part, index) => part !== first[index]);
+    return differs === -1 || (of[differs] ?? 0) > (first[differs] ?? 0);
+}
+/**
+ * The gofer a restore of a snapshot taken under gVisor's `release` asks for: through a socket,
+ * reading again pages a read of failed, of one at or past `since`, the first release that
+ * restores so, as cluster/node/pins.json says it (gvisor.restoresThroughSocketSince); none,
+ * the agent's own way, over TCP, of one before it, and of every release where `since` names none.
+ */
+export const goferOf = (release, since) => (releaseAtOrPast(release, since) ? { transport: "socket", pagesRetry: true } : null);
+/**
+ * The name of a restore's pod, as the gateway makes it (../gateway/names.ts restorePodName): its
+ * pool's, `-restore-`, then seven of base 36's digits; the one name whose directory the node
+ * agent makes for it, before the pod is made.
+ */
+export const RESTORE_POD = /^[a-z0-9]([-a-z0-9]*[a-z0-9])?-restore-[0-9a-z]{7}$/u;
+/** The variable that gives the node agent the first gVisor release that restores straight from the bucket (restoresFromBucket). */
+export const RESTORES_FROM_BUCKET_SINCE_VARIABLE = "ALASIO_GVISOR_RESTORES_FROM_BUCKET_SINCE";
 /** Where k3s's containerd reads its template, and runsc its options. */
 export const CONTAINERD = "/var/lib/rancher/k3s/agent/etc/containerd";
 /** gVisor's `release` as a DNS label, which containerd's runtimes and Kubernetes' RuntimeClasses are named with: its dots made dashes. */
@@ -29,6 +102,13 @@ export const gvisorHandler = (release) => `runsc-${gvisorLabel(release)}`;
 export const gvisorRuntimeClass = (release) => `gvisor-${gvisorLabel(release)}`;
 /** The version runsc of gVisor's `release` reports, and saves its images with: its release's tag. */
 export const runscVersion = (release) => `release-${release}`;
+/**
+ * Where a node has workspace storage mounted, held by a pod of its own, each workspace's
+ * files at `<environment>/<workspace>/files`.
+ */
+export const WORKSPACES_ROOT = "/var/lib/alasio/workspaces";
+/** Where a node keeps the directory of each pod of a sandbox pool, `<namespace>/<pod>`, which the pod mounts by `subPathExpr` of its namespace and its name. */
+export const ATTACH_ROOT = "/var/lib/alasio/attach";
 /** The root the gVisor shims run runsc with for Kubernetes' containers, under the node's /run. */
 export const RUNSC_ROOT = "/run/containerd/runsc/k8s.io";
 /** The node's snapshot cache, where its sandboxes are restored from, as the admission policy holds a restore to. */
@@ -61,14 +141,50 @@ export const UNSYNCED_DOWNLOAD_BYTES = SNAPSHOT_PARTS_AT_ONCE * SNAPSHOT_SYNC_BY
 export const NODE_AGENT_OWN_BYTES = 160 * 1024 ** 2;
 /** The least memory limit a node agent runs under: its own, and a download's budget beside it. */
 export const NODE_AGENT_MEMORY_FLOOR = NODE_AGENT_OWN_BYTES + UNSYNCED_DOWNLOAD_BYTES;
-/** The variable holding the token alasio presents to a node agent. */
+/** The variable holding the token the sandbox gateway presents to a node agent. */
 export const NODE_AGENT_TOKEN_VARIABLE = "ALASIO_NODE_AGENT_TOKEN";
+/** The variable holding workspace storage's metadata engine's address, its password in it, which the agent sets workspaces' quotas on alone. */
+export const META_URL_VARIABLE = "META_URL";
 /** The variable holding the most bytes the node's snapshot cache keeps. */
 export const SNAPSHOT_CACHE_BYTES_VARIABLE = "ALASIO_SNAPSHOT_CACHE_BYTES";
 /**
  * How long a checkpoint, a prepare or a copy may take: a sandbox's memory, through the store,
  * both ways, or within it. alasio waits for one so long, and an agent that stops lets the
- * ones it runs end within it (./operations.ts).
+ * ones it runs end within it (./operations.ts), after its restores' reads (nodeAgentStopSeconds).
  */
 export const OPERATION_LIMIT_SECONDS = 15 * 60;
+/**
+ * How long a restore from the bucket may take from its prepare to its resume, which its token
+ * lasts unless resumed before (./store-proxy.ts): the longest it takes, alasio waiting 3
+ * minutes for its pod to run (POD_RUNNING_TIMEOUT_MS in src/gateway/snapshots.ts), then for the
+ * agent's resume, and a margin.
+ */
+export const RESTORE_PREPARED_FOR_SECONDS = 5 * 60;
+/** The variable holding how long, in seconds, a resumed restore from the bucket may read it through the node agent (backgroundReadSeconds). */
+export const BACKGROUND_READ_SECONDS_VARIABLE = "ALASIO_BACKGROUND_READ_SECONDS";
+/**
+ * The slowest a resumed restore is taken to read the rest of its sandbox through the node
+ * agent, in the background: half of what gate 4 measured on a runner's bundled SeaweedFS,
+ * 8.7 MB/s through the agent's proxy from the restore's start to its last read
+ * (program/progress/live-lazy.md).
+ */
+export const BACKGROUND_READ_BYTES_PER_SECOND = 4 * 1024 ** 2;
+/**
+ * How long a resumed restore of a sandbox of at most `memoryBytes` may read the rest of it
+ * through the node agent, at the slowest (BACKGROUND_READ_BYTES_PER_SECOND), in seconds: a
+ * minute at least.
+ */
+export function backgroundReadSeconds(memoryBytes) {
+    return Math.max(60, Math.ceil(memoryBytes / BACKGROUND_READ_BYTES_PER_SECOND));
+}
+/**
+ * How long a node agent that stops may take, its sandboxes of at most `memoryBytes`: the
+ * restores that read the bucket through it done first, the last within its token's time (one
+ * prepared just before the stop taking as long as a restore takes to its resume, then as long
+ * as it takes to read its sandbox whole), then the checkpoints, prepares and copies it runs
+ * (OPERATION_LIMIT_SECONDS).
+ */
+export function nodeAgentStopSeconds(memoryBytes) {
+    return RESTORE_PREPARED_FOR_SECONDS + backgroundReadSeconds(memoryBytes) + OPERATION_LIMIT_SECONDS;
+}
 //# sourceMappingURL=names.js.map

package/dist/src/node-agent/names.js.map

@@ -1 +1 @@
-{"version":3,"file":"names.js","sourceRoot":"","sources":["../../../../src/node-agent/names.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,qEAAqE;AACrE,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,8BAA8B,CAAC;AAE9D,qDAAqD;AACrD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,GAAG,eAAe,IAAI,OAAO,EAAE,CAAC;AAE5F,wEAAwE;AACxE,MAAM,CAAC,MAAM,UAAU,GAAG,2CAA2C,CAAC;AAEtE,0IAA0I;AAC1I,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAErF;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,SAAS,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;AAE1F,2GAA2G;AAC3G,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,UAAU,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;AAEhG,qGAAqG;AACrG,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,WAAW,OAAO,EAAE,CAAC;AAE9E,kGAAkG;AAClG,MAAM,CAAC,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAEzD,oHAAoH;AACpH,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAC;AAQrD,uIAAuI;AACvI,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;AAElD,6HAA6H;AAC7H,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC,0FAA0F;AAC1F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,mBAAmB,CAAC;AAEpF;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC;AAEpD,kGAAkG;AAClG,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,GAAG,uBAAuB,CAAC;AAEtF,sEAAsE;AACtE,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AAEnE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,6BAA6B,CAAC;AAE3E;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,CAAC"}
+{"version":3,"file":"names.js","sourceRoot":"","sources":["../../../../src/node-agent/names.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,qEAAqE;AACrE,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAC3D,6FAA6F;AAC7F,MAAM,CAAC,MAAM,2BAA2B,GAAG,2BAA2B,CAAC;AACvE,6GAA6G;AAC7G,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,GAAG,MAAM,aAAa,CAAC;AAC9E,0GAA0G;AAC1G,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,GAAG,MAAM,cAAc,CAAC;AACnF,oIAAoI;AACpI,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAEhE,yGAAyG;AACzG,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AAExC;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,8BAA8B,CAAC;AAE9D,qDAAqD;AACrD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,GAAG,eAAe,IAAI,OAAO,EAAE,CAAC;AAE5F;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,KAAa;IAC/D,OAAO,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,OAAe,EAAE,KAAa;IACrD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE;QAC9B,MAAM,OAAO,GAAG,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC,CAAC;IACF,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACnD,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChD,MAAM,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,OAAO,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACtE,CAAC;AAYD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,KAAa,EAAgB,EAAE,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAE9J;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,sDAAsD,CAAC;AAElF,mIAAmI;AACnI,MAAM,CAAC,MAAM,mCAAmC,GAAG,0CAA0C,CAAC;AAE9F,wEAAwE;AACxE,MAAM,CAAC,MAAM,UAAU,GAAG,2CAA2C,CAAC;AAEtE,0IAA0I;AAC1I,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAErF;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,SAAS,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;AAE1F,2GAA2G;AAC3G,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,UAAU,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;AAEhG,qGAAqG;AACrG,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,WAAW,OAAO,EAAE,CAAC;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,4BAA4B,CAAC;AAE5D,gKAAgK;AAChK,MAAM,CAAC,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAEpD,kGAAkG;AAClG,MAAM,CAAC,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAEzD,oHAAoH;AACpH,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAC;AAQrD,uIAAuI;AACvI,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;AAElD,6HAA6H;AAC7H,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC,0FAA0F;AAC1F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,sBAAsB,GAAG,mBAAmB,CAAC;AAEpF;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC;AAEpD,kGAAkG;AAClG,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,GAAG,uBAAuB,CAAC;AAEtF,mFAAmF;AACnF,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AAEnE,gJAAgJ;AAChJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAE5C,2EAA2E;AAC3E,MAAM,CAAC,MAAM,6BAA6B,GAAG,6BAA6B,CAAC;AAE3E;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,GAAG,EAAE,CAAC;AAEnD,+IAA+I;AAC/I,MAAM,CAAC,MAAM,gCAAgC,GAAG,gCAAgC,CAAC;AAEjF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AAE9D;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAmB;IACvD,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,gCAAgC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,4BAA4B,GAAG,qBAAqB,CAAC,WAAW,CAAC,GAAG,uBAAuB,CAAC;AACrG,CAAC"}

package/dist/src/sandbox/names.js

@@ -1,33 +1,18 @@
 /**
  * Naming for session filesystems. A workspace is one of two kinds (see
  * ../workspace/kind.ts): a folder, or a session filesystem identified by a volume id.
- * A volume id is what alasio generates and stores, and its session's Sandbox, Service and
- * volume claim are named for it.
- */
-import { Schema } from "effect";
-/**
- * The longest a volume id is: a DNS label's 63 characters, less a claim template's name
- * of up to CLAIM_TEMPLATE_MAX and the hyphen after it, so its volume claims' names,
- * `<template>-<id>` (../kube/sandboxes.ts claimName), are DNS labels too, as alasio's
- * admission policy of its clones holds them to (cli/src/manifests/admission.ts).
+ * A volume id is what alasio generates and stores, and its session's workspace, which the
+ * sandbox gateway holds, is named for it (sessionKey).
  */
+/** The longest a volume id is: a DNS label's 63 characters, with room to spare, as the ids alasio has stored are. */
 export const VOLUME_ID_MAX = 58;
-/** The longest a claim template's name is, of which a volume id's claims are named. */
-export const CLAIM_TEMPLATE_MAX = 63 - 1 - VOLUME_ID_MAX;
 /**
  * A volume id is a DNS label of 3–58 characters from `[a-z0-9-]` that starts and ends
- * with a letter or digit, as the names of the Sandbox, its Service and its pod must be,
- * and short enough for its claims' (VOLUME_ID_MAX). alasio generates ids that already
+ * with a letter or digit, as the names of what is made of it must be, a workspace's
+ * directory among them, of VOLUME_ID_MAX at most. alasio generates ids that already
  * satisfy this, and this guards against any that would not.
  */
 const VOLUME_ID_PATTERN = new RegExp(`^[a-z0-9][a-z0-9-]{1,${VOLUME_ID_MAX - 2}}[a-z0-9]$`, "u");
-/** A volume id, as what comes from outside alasio is decoded. */
-const VolumeId = Schema.String.check(Schema.isPattern(VOLUME_ID_PATTERN));
-/**
- * A session's token, `<volumeId>.<random>` (../kube/sandboxes.ts newToken), decoded into
- * the session it names and the rest.
- */
-export const SessionToken = Schema.TemplateLiteralParser([VolumeId, ".", Schema.NonEmptyString]);
 export function isValidVolumeId(volumeId) {
     return typeof volumeId === "string" && VOLUME_ID_PATTERN.test(volumeId);
 }
@@ -41,4 +26,11 @@ export function assertValidVolumeId(volumeId) {
 export function newVolumeId(random = () => crypto.randomUUID()) {
     return `fs-${random().replace(/-/g, "").slice(0, 12)}`;
 }
+/** The key a session filesystem's workspace is bound by in the sandbox service: `sessionfs:<volumeId>`. */
+export const sessionKey = (volumeId) => `sessionfs:${volumeId}`;
+/** The volume id of the session filesystem `key` binds, where it binds one; else null. */
+export function volumeIdOfKey(key) {
+    const volumeId = key.startsWith("sessionfs:") ? key.slice("sessionfs:".length) : "";
+    return isValidVolumeId(volumeId) ? volumeId : null;
+}
 //# sourceMappingURL=names.js.map

package/dist/src/sandbox/names.js.map

@@ -1 +1 @@
-{"version":3,"file":"names.js","sourceRoot":"","sources":["../../../../src/sandbox/names.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAEhC,uFAAuF;AACvF,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,CAAC,GAAG,aAAa,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,wBAAwB,aAAa,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;AAEjG,iEAAiE;AACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAE1E;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;AAEjG,MAAM,UAAU,eAAe,CAAC,QAAiB;IAC/C,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,aAAa,kEAAkE,CAAC,CAAC;IACrK,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,MAAM,GAAiB,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE;IAC1E,OAAO,MAAM,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACzD,CAAC"}
+{"version":3,"file":"names.js","sourceRoot":"","sources":["../../../../src/sandbox/names.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,qHAAqH;AACrH,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,wBAAwB,aAAa,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;AAEjG,MAAM,UAAU,eAAe,CAAC,QAAiB;IAC/C,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,aAAa,kEAAkE,CAAC,CAAC;IACrK,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,MAAM,GAAiB,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE;IAC1E,OAAO,MAAM,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,2GAA2G;AAC3G,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,aAAa,QAAQ,EAAE,CAAC;AAEhF,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC"}

package/dist/src/sandbox/otlp-resource.js

@@ -0,0 +1,173 @@
+const RESOURCE_LISTS = {
+    traces: ["resourceSpans", "scopeSpans"],
+    metrics: ["resourceMetrics", "scopeMetrics"],
+    logs: ["resourceLogs", "scopeLogs"],
+};
+/** Thrown for a request that does not parse as one, which is then not exported. */
+export class MalformedRequest extends Error {
+    name = "MalformedRequest";
+}
+function isStamped(key, stamp) {
+    return Object.hasOwn(stamp, key) || key.startsWith("alasio.");
+}
+// --- Binary protobuf ----------------------------------------------------------
+// The levels the resource is at, by field number, the same for all three signals:
+//   Export{Trace,Metrics,Logs}ServiceRequest  1: repeated Resource{Spans,Metrics,Logs}
+//   Resource{Spans,Metrics,Logs}               1: Resource
+//   Resource                                   1: repeated KeyValue attributes
+//   KeyValue                                   1: string key, 2: AnyValue value
+//   AnyValue                                   1: string string_value
+const VARINT = 0;
+const FIXED64 = 1;
+const LEN = 2;
+const FIXED32 = 5;
+function readVarint(buf, at) {
+    let value = 0;
+    for (let shift = 0; shift < 64; shift += 7) {
+        const byte = buf[at++];
+        if (byte === undefined)
+            throw new MalformedRequest("truncated varint");
+        value += (byte & 0x7f) * 2 ** shift;
+        if ((byte & 0x80) === 0)
+            return [value, at];
+    }
+    throw new MalformedRequest("overlong varint");
+}
+/** Each field of a message: its number, wire type, whole encoding, and value. */
+function* fields(buf) {
+    let at = 0;
+    while (at < buf.length) {
+        const start = at;
+        let tag;
+        [tag, at] = readVarint(buf, at);
+        const field = Math.floor(tag / 8);
+        const wire = tag % 8;
+        if (field === 0)
+            throw new MalformedRequest("field number 0");
+        let valueStart = at;
+        if (wire === VARINT)
+            [, at] = readVarint(buf, at);
+        else if (wire === FIXED64)
+            at += 8;
+        else if (wire === FIXED32)
+            at += 4;
+        else if (wire === LEN) {
+            let length;
+            [length, valueStart] = readVarint(buf, at);
+            at = valueStart + length;
+        }
+        else
+            throw new MalformedRequest(`wire type ${wire}`);
+        if (at > buf.length)
+            throw new MalformedRequest("truncated field");
+        yield { field, wire, whole: buf.subarray(start, at), value: buf.subarray(valueStart, at) };
+    }
+}
+/** A message field's value, which must be length-delimited. */
+function message({ field, wire, value }) {
+    if (wire !== LEN)
+        throw new MalformedRequest(`field ${field} has wire type ${wire}`);
+    return value;
+}
+function varint(value) {
+    const bytes = [];
+    for (; value >= 0x80; value = Math.floor(value / 128))
+        bytes.push((value % 128) | 0x80);
+    bytes.push(value);
+    return Buffer.from(bytes);
+}
+function lengthDelimited(field, bytes) {
+    return Buffer.concat([varint(field * 8 + LEN), varint(bytes.length), bytes]);
+}
+/** A KeyValue's key, the last given as protobuf merges them, or "" for none. */
+function keyOf(keyValue) {
+    let key = "";
+    for (const field of fields(keyValue)) {
+        if (field.field === 1)
+            key = message(field).toString("utf8");
+    }
+    return key;
+}
+function stampedAttributesProtobuf(stamp) {
+    return Object.entries(stamp).map(([key, value]) => lengthDelimited(1, Buffer.concat([
+        lengthDelimited(1, Buffer.from(key, "utf8")),
+        lengthDelimited(2, lengthDelimited(1, Buffer.from(value, "utf8"))),
+    ])));
+}
+/**
+ * A Resource{Spans,Metrics,Logs} with one Resource: every Resource it held merged as
+ * protobuf merges repeated occurrences, less the stamped attributes, plus the stamp.
+ */
+function stampResourcePart(part, stamp) {
+    const resource = [];
+    const rest = [];
+    for (const field of fields(part)) {
+        if (field.field !== 1) {
+            rest.push(field.whole);
+            continue;
+        }
+        for (const resourceField of fields(message(field))) {
+            if (resourceField.field === 1 && isStamped(keyOf(message(resourceField)), stamp))
+                continue;
+            resource.push(resourceField.whole);
+        }
+    }
+    return Buffer.concat([lengthDelimited(1, Buffer.concat([...resource, ...stampedAttributesProtobuf(stamp)])), ...rest]);
+}
+function stampProtobuf(body, stamp) {
+    return Buffer.concat([...fields(body)].map((field) => field.field === 1 ? lengthDelimited(1, stampResourcePart(message(field), stamp)) : field.whole));
+}
+// --- JSON ---------------------------------------------------------------------
+const isObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+function list(value, what) {
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value))
+        throw new MalformedRequest(`${what} is not a list`);
+    return value;
+}
+function object(value, what) {
+    if (value === undefined)
+        return {};
+    if (!isObject(value))
+        throw new MalformedRequest(`${what} is not an object`);
+    return value;
+}
+/** The fields of `source` named by `names` that it has. */
+function only(source, names) {
+    return Object.fromEntries(names.filter((name) => source[name] !== undefined).map((name) => [name, source[name]]));
+}
+function stampJson(signal, body, stamp) {
+    let request;
+    try {
+        request = JSON.parse(body.toString("utf8"));
+    }
+    catch (error) {
+        throw new MalformedRequest(error instanceof Error ? error.message : String(error));
+    }
+    const [partsName, scopesName] = RESOURCE_LISTS[signal];
+    const parts = list(object(request, "the request")[partsName], partsName).map((value) => {
+        const part = object(value, partsName);
+        const resource = object(part["resource"], "resource");
+        const attributes = list(resource["attributes"], "resource.attributes")
+            .filter((attribute) => !(isObject(attribute) && typeof attribute["key"] === "string" && isStamped(attribute["key"], stamp)));
+        return {
+            resource: {
+                ...only(resource, ["droppedAttributesCount", "entityRefs"]),
+                attributes: [...attributes, ...Object.entries(stamp).map(([key, value]) => ({ key, value: { stringValue: value } }))],
+            },
+            ...only(part, [scopesName, "schemaUrl"]),
+        };
+    });
+    return Buffer.from(JSON.stringify({ [partsName]: parts }), "utf8");
+}
+/**
+ * `body`, an OTLP export request for `signal` in `encoding` ("protobuf" or "json"),
+ * with its resources stamped. Throws MalformedRequest for one that does not parse.
+ */
+export function stampResources(signal, encoding, body, stamp) {
+    if (!Object.hasOwn(RESOURCE_LISTS, signal))
+        throw new Error(`unknown signal ${signal}`);
+    return encoding === "json" ? stampJson(signal, body, stamp) : stampProtobuf(body, stamp);
+}
+//# sourceMappingURL=otlp-resource.js.map

package/dist/src/sandbox/otlp-resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otlp-resource.js","sourceRoot":"","sources":["../../../../src/sandbox/otlp-resource.ts"],"names":[],"mappings":"AAeA,MAAM,cAAc,GAAuE;IACzF,MAAM,EAAE,CAAC,eAAe,EAAE,YAAY,CAAC;IACvC,OAAO,EAAE,CAAC,iBAAiB,EAAE,cAAc,CAAC;IAC5C,IAAI,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC;CACpC,CAAC;AAEF,mFAAmF;AACnF,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,IAAI,GAAG,kBAAkB,CAAC;CACpC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,KAAoB;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAChE,CAAC;AAED,iFAAiF;AACjF,kFAAkF;AAClF,uFAAuF;AACvF,2DAA2D;AAC3D,+EAA+E;AAC/E,gFAAgF;AAChF,sEAAsE;AAEtE,MAAM,MAAM,GAAG,CAAC,CAAC;AACjB,MAAM,OAAO,GAAG,CAAC,CAAC;AAClB,MAAM,GAAG,GAAG,CAAC,CAAC;AACd,MAAM,OAAO,GAAG,CAAC,CAAC;AAWlB,SAAS,UAAU,CAAC,GAAW,EAAE,EAAU;IACzC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACvB,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QACvE,KAAK,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;AAChD,CAAC;AAED,iFAAiF;AACjF,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAW;IAC1B,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,IAAI,GAAW,CAAC;QAChB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC;QACrB,IAAI,KAAK,KAAK,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QAC9D,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,IAAI,KAAK,MAAM;YAAE,CAAC,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;aAC7C,IAAI,IAAI,KAAK,OAAO;YAAE,EAAE,IAAI,CAAC,CAAC;aAC9B,IAAI,IAAI,KAAK,OAAO;YAAE,EAAE,IAAI,CAAC,CAAC;aAC9B,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,MAAc,CAAC;YACnB,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC3C,EAAE,GAAG,UAAU,GAAG,MAAM,CAAC;QAC3B,CAAC;;YAAM,MAAM,IAAI,gBAAgB,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QACnE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,SAAS,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAS;IAC5C,IAAI,IAAI,KAAK,GAAG;QAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,KAAK,kBAAkB,IAAI,EAAE,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,OAAO,KAAK,IAAI,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACxF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,gFAAgF;AAChF,SAAS,KAAK,CAAC,QAAgB;IAC7B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;YAAE,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAoB;IACrD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAChD,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QAC/B,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5C,eAAe,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;KACnE,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAoB;IAC3D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,KAAK,MAAM,aAAa,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACnD,IAAI,aAAa,CAAC,KAAK,KAAK,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC;gBAAE,SAAS;YAC3F,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;AACzH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,KAAoB;IACvD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnD,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,iFAAiF;AAEjF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,SAAS,IAAI,CAAC,KAAc,EAAE,IAAY;IACxC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,GAAG,IAAI,gBAAgB,CAAC,CAAC;IAC/E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IAC7E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2DAA2D;AAC3D,SAAS,IAAI,CAAC,MAA+B,EAAE,KAAwB;IACrE,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACpH,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,IAAY,EAAE,KAAoB;IACnE,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,gBAAgB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACrF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC;aACnE,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/H,OAAO;YACL,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC;gBAC3D,UAAU,EAAE,CAAC,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;aACtH;YACD,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;SACzC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,QAAsB,EAAE,IAAY,EAAE,KAAoB;IACvG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;IACxF,OAAO,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC3F,CAAC"}

package/dist/src/sandbox/telemetry.js

@@ -0,0 +1,43 @@
+/**
+ * What bayma inside a session's sandbox exports its telemetry with, and what is stamped on
+ * it. A pool's pod's one way out without internet is the sandbox service's receiver
+ * (../receiver/receiver.ts), so its bayma exports there, with its binding's token, each signal
+ * the sandbox gateway exports, as the gateway tells the node agent attaching the workspace
+ * (../gateway/sessions.ts); the receiver stamps what arrives with what is known of the session
+ * and exports it where the stack's telemetry goes.
+ */
+import { parseKeyValueList, resolveTelemetry, sharedResourceAttributes, SIGNALS, telemetryEnabled } from "../telemetry/config.js";
+/**
+ * The standard variables bayma inside a sandbox exports with, but for the endpoint and the
+ * token it sends, which are the sandbox's own: each signal `env`, the gateway's, exports, in
+ * the protocol it exports it in, and no other. Empty where it exports nothing.
+ */
+export function sandboxBaymaTelemetryEnv(env = process.env) {
+    const telemetry = resolveTelemetry(env);
+    if (!telemetryEnabled(telemetry))
+        return {};
+    const settings = {};
+    for (const signal of SIGNALS) {
+        const upper = signal.toUpperCase();
+        const exporter = telemetry[signal];
+        settings[`OTEL_${upper}_EXPORTER`] = exporter ? "otlp" : "none";
+        if (exporter)
+            settings[`OTEL_EXPORTER_OTLP_${upper}_PROTOCOL`] = exporter.protocol;
+    }
+    return settings;
+}
+/** The resource attributes a session's telemetry is stamped with. */
+export function sandboxResource(volumeId, env = process.env) {
+    return { ...parseKeyValueList(sharedResourceAttributes(env)), "service.name": "bayma", "alasio.volume.id": volumeId };
+}
+/**
+ * What a folder conversation's instance's telemetry is stamped with: bayma's, of the
+ * conversation, as alasio's own of the conversation is, and the harness it is under.
+ */
+export const folderResource = (harness, conversation, env = process.env) => ({
+    ...parseKeyValueList(sharedResourceAttributes(env)),
+    "service.name": "bayma",
+    "alasio.conversation.id": conversation,
+    "alasio.harness": harness,
+});
+//# sourceMappingURL=telemetry.js.map

package/dist/src/sandbox/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../../../src/sandbox/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAGlI;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAG,GAAgC,OAAO,CAAC,GAAG;IACrF,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QACnC,QAAQ,CAAC,QAAQ,KAAK,WAAW,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAChE,IAAI,QAAQ;YAAE,QAAQ,CAAC,sBAAsB,KAAK,WAAW,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACrF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,GAAG,GAAgC,OAAO,CAAC,GAAG;IAC9F,OAAO,EAAE,GAAG,iBAAiB,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC;AACxH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAe,EAAE,YAAoB,EAAE,GAAG,GAAgC,OAAO,CAAC,GAAG,EAAiB,EAAE,CAAC,CAAC;IACvI,GAAG,iBAAiB,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;IACnD,cAAc,EAAE,OAAO;IACvB,wBAAwB,EAAE,YAAY;IACtC,gBAAgB,EAAE,OAAO;CAC1B,CAAC,CAAC"}

package/dist/src/telegram/deliveries.js

@@ -0,0 +1,40 @@
+/**
+ * How Telegram's deliveries of a bot's updates to the webhook intake fare, as the bot's
+ * getWebhookInfo says, which is where alone Telegram says a delivery failed: alike for
+ * alasio, which watches its own bot's (./delivery-watch.ts), and for alasio status, which
+ * says each environment's. Free of anything but the language's own, so the command line
+ * takes it without the server.
+ */
+/** How long a failed delivery is a failure now, as Telegram keeps its last error after it delivers again. */
+const LATELY_SECONDS = 600;
+/**
+ * Telegram's errors that say it could not connect to the intake at all, as where the
+ * networks it delivers from are not among install.webhook.sources, which the intake's
+ * NetworkPolicy and a LoadBalancer admit alone: the connection is dropped, and times out,
+ * or refused.
+ */
+const UNREACHABLE = /^(Connection timed out|Connection refused|No route to host|Network is unreachable)\b/u;
+/** Telegram's error that says the name it is told to deliver to resolves to no address. */
+const UNRESOLVED = /^Failed to resolve host\b/u;
+/** The fix Telegram's error `error` points to, null where it points to none. */
+function fixOf(error) {
+    if (UNREACHABLE.test(error)) {
+        return "Telegram cannot connect to it, as where its networks have changed from those install.webhook.sources lists: list Telegram's (core.telegram.org/bots/webhooks) there, and alasio up admits them";
+    }
+    if (UNRESOLVED.test(error))
+        return "Telegram cannot resolve install.webhook.publicAddress: give the name an address, or set the address itself, and alasio up registers each bot with it";
+    return null;
+}
+/**
+ * Whether `deliveries` fail at `now` (milliseconds): updates wait, and Telegram's last
+ * delivery failed lately; null where they do not, as where nothing waits, every update
+ * delivered since.
+ */
+export function failingDeliveries(deliveries, now) {
+    const { pending_update_count: pending, last_error_date: date, last_error_message: error = "no reason given" } = deliveries;
+    if (pending === 0 || date === undefined || now / 1000 - date >= LATELY_SECONDS)
+        return null;
+    const at = new Date(date * 1000).toISOString().replace(/\.\d{3}Z$/u, "Z");
+    return { description: `${pending} update${pending === 1 ? "" : "s"} waiting; Telegram's last delivery failed at ${at}: ${error}`, fix: fixOf(error) };
+}
+//# sourceMappingURL=deliveries.js.map

package/dist/src/telegram/deliveries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deliveries.js","sourceRoot":"","sources":["../../../../src/telegram/deliveries.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH,6GAA6G;AAC7G,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,WAAW,GAAG,uFAAuF,CAAC;AAE5G,2FAA2F;AAC3F,MAAM,UAAU,GAAG,4BAA4B,CAAC;AAEhD,gFAAgF;AAChF,SAAS,KAAK,CAAC,KAAa;IAC1B,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,gMAAgM,CAAC;IAC1M,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,sJAAsJ,CAAC;IAC1L,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAsB,EAAE,GAAW;IACnE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,GAAG,iBAAiB,EAAE,GAAG,UAAU,CAAC;IAC3H,IAAI,OAAO,KAAK,CAAC,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,IAAI,cAAc;QAAE,OAAO,IAAI,CAAC;IAC5F,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAC1E,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,UAAU,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,gDAAgD,EAAE,KAAK,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AACxJ,CAAC"}

package/dist/src/telemetry/config.js

@@ -0,0 +1,131 @@
+/**
+ * Which of alasio's signals are exported, and where, decided from the standard
+ * OpenTelemetry environment variables alone, so any OTLP backend works and none is
+ * assumed.
+ *
+ * A signal is exported when it has an endpoint, its own
+ * (`OTEL_EXPORTER_OTLP_<SIGNAL>_ENDPOINT`) or the shared one
+ * (`OTEL_EXPORTER_OTLP_ENDPOINT`), and `OTEL_<SIGNAL>_EXPORTER` is unset or `otlp`;
+ * `OTEL_SDK_DISABLED=true` turns every signal off. With no endpoint at all alasio
+ * exports nothing and loads no SDK.
+ */
+export const SIGNALS = ["traces", "metrics", "logs"];
+const DEFAULT_PROTOCOL = "http/protobuf";
+/** Variables that configure telemetry, which alasio hands no child as it is. */
+const TELEMETRY_VARIABLE = /^(OTEL_.*|TRACEPARENT|TRACESTATE)$/u;
+function setting(env, name) {
+    return env[name]?.trim() || null;
+}
+/**
+ * The OTLP endpoint a signal is sent to: its own as given, else the shared one, to
+ * which OTLP over HTTP adds the signal's path and OTLP over gRPC adds nothing.
+ */
+function signalEndpoint(env, signal, protocol) {
+    const own = setting(env, `OTEL_EXPORTER_OTLP_${signal.toUpperCase()}_ENDPOINT`);
+    if (own)
+        return own;
+    const shared = setting(env, "OTEL_EXPORTER_OTLP_ENDPOINT");
+    if (!shared || protocol === "grpc")
+        return shared;
+    return `${shared.replace(/\/+$/u, "")}/v1/${signal}`;
+}
+/** How `signal` is exported, or null when it is not. */
+function signalExporter(env, signal, disabled) {
+    const upper = signal.toUpperCase();
+    const exporter = setting(env, `OTEL_${upper}_EXPORTER`) ?? "otlp";
+    const protocol = setting(env, `OTEL_EXPORTER_OTLP_${upper}_PROTOCOL`)
+        ?? setting(env, "OTEL_EXPORTER_OTLP_PROTOCOL")
+        ?? DEFAULT_PROTOCOL;
+    const endpoint = signalEndpoint(env, signal, protocol);
+    if (disabled || exporter !== "otlp" || !endpoint) {
+        return null;
+    }
+    return { endpoint, protocol, headers: signalHeaders(env, signal) };
+}
+/**
+ * `{ traces, metrics, logs }`, each `{ endpoint, protocol, headers }` for a signal
+ * alasio exports or null for one it does not. `headers` is the standard
+ * `key=value,key=value` list, or null.
+ */
+export function resolveTelemetry(env = process.env) {
+    const disabled = setting(env, "OTEL_SDK_DISABLED")?.toLowerCase() === "true";
+    return {
+        traces: signalExporter(env, "traces", disabled),
+        metrics: signalExporter(env, "metrics", disabled),
+        logs: signalExporter(env, "logs", disabled),
+    };
+}
+/**
+ * A signal's OTLP exporter setting `name` (HEADERS, TIMEOUT, ...): its own
+ * (`OTEL_EXPORTER_OTLP_<SIGNAL>_<NAME>`), else the shared one, or null.
+ */
+export function signalSetting(env, signal, name) {
+    return setting(env, `OTEL_EXPORTER_OTLP_${signal.toUpperCase()}_${name}`) ?? setting(env, `OTEL_EXPORTER_OTLP_${name}`);
+}
+/** The headers a signal is sent with: its own, else the shared ones, or null. */
+export function signalHeaders(env, signal) {
+    return signalSetting(env, signal, "HEADERS");
+}
+/** Whether any signal is exported. */
+export function telemetryEnabled(telemetry) {
+    return SIGNALS.some((signal) => telemetry[signal]);
+}
+/** An environment without the variables that configure telemetry. */
+export function withoutTelemetry(env) {
+    return Object.fromEntries(Object.entries(env).filter(([name]) => !TELEMETRY_VARIABLE.test(name)));
+}
+/**
+ * The resource attributes a harness exporting telemetry of its own shares with alasio:
+ * the operator's `OTEL_RESOURCE_ATTRIBUTES`, which describe the deployment, without
+ * `service.name`, which is alasio's. The standard `key=value,key=value` list, or null.
+ */
+export function sharedResourceAttributes(env = process.env) {
+    const shared = (setting(env, "OTEL_RESOURCE_ATTRIBUTES") ?? "")
+        .split(",")
+        .filter((pair) => pair.trim() && pair.split("=")[0]?.trim() !== "service.name");
+    return shared.length ? shared.join(",") : null;
+}
+/**
+ * The standard variables that have a process serving one conversation, Claude Code
+ * or bayma, export each signal alasio exports where alasio exports it, and no other:
+ * each exported signal's exporter, endpoint, protocol, and headers, every other
+ * signal's exporter none, and the deployment's resource attributes with the
+ * conversation's. Nothing when alasio exports nothing.
+ */
+export function conversationTelemetryEnv({ conversationId }, env = process.env) {
+    const telemetry = resolveTelemetry(env);
+    if (!telemetryEnabled(telemetry))
+        return {};
+    const settings = {
+        OTEL_RESOURCE_ATTRIBUTES: [sharedResourceAttributes(env), `alasio.conversation.id=${encodeURIComponent(conversationId)}`]
+            .filter(Boolean)
+            .join(","),
+    };
+    for (const signal of SIGNALS) {
+        const upper = signal.toUpperCase();
+        const exporter = telemetry[signal];
+        settings[`OTEL_${upper}_EXPORTER`] = exporter ? "otlp" : "none";
+        if (!exporter)
+            continue;
+        settings[`OTEL_EXPORTER_OTLP_${upper}_ENDPOINT`] = exporter.endpoint;
+        settings[`OTEL_EXPORTER_OTLP_${upper}_PROTOCOL`] = exporter.protocol;
+        if (exporter.headers)
+            settings[`OTEL_EXPORTER_OTLP_${upper}_HEADERS`] = exporter.headers;
+    }
+    return settings;
+}
+/**
+ * A standard `key=value,key=value` list, such as OTLP headers or resource attributes, as
+ * an object, values URL-decoded.
+ */
+export function parseKeyValueList(list) {
+    if (!list)
+        return {};
+    return Object.fromEntries(list.split(",").flatMap((pair) => {
+        const at = pair.indexOf("=");
+        if (at <= 0)
+            return [];
+        return [[pair.slice(0, at).trim(), decodeURIComponent(pair.slice(at + 1).trim())]];
+    }));
+}
+//# sourceMappingURL=config.js.map